You’ll need to remove that extra A record before you’ll be able to enable HTTPS for your custom domain.

Once you’ve removed the A record, you’ll need to visit your repository’s settings page, which will kick off the process of provisioning an HTTPS certificate for your domain name.

Once your certificate has been provisioned, you’ll then be able to enforce HTTPS by checking the “Enforce HTTPS” checkbox.

Bear in mind that it can take up to 72 hours for DNS changes to take full effect, and up to an hour for an HTTPS certificate to be requested, so if you follow these steps but are still having trouble, that’s usually why.